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Abstract 

We analyze quantum two prover one round interactive proof systems, 
in which noninteracting provers can share unUmited entanglement. The 
maximum acceptance probability is characterized as a superoperator norm. 
We get some partial results about the superoperator norm, and in partic- 
ular we analyze the "rank one" case. 

1 Introduction 

Classical interactive proof systems allow an interaction between an efficient ver- 
ifier and an all powerful prover. Classical interactive proof systems are quite 
powerful: one prover can prove theorems in PSPACE to an efficient verifier [H] 
while two or more powerful provers that cannot interact between themselves 
can prove the whole of NEXP [2] . 

Kitaev and Watrous [S] studied the power of interaction between an efficient 
quantum verifier and a single prover. They prove that such a proof system is 
at least as powerful as a classical one prover proof system but not as powerful 
as classical two provers (PSPACE C QIP C EXP). Moreover they show that 
in the quantum case 3 communication messages are enough (QIP = QIP(3)). 
They also show how to achieve perfect completeness and parallel amplification 
for the model. 

The quantum multiprover case is more complicated. As in the classical 
case the provers cannot interact between themselves. There are three models 
concerning the initial state of the provers private qubits. In one model they 
are not allowed to share any prior entanglement at all, in the second they are 
allowed to share limited entanglement and in the third they can share unlimited 
entanglement. Kobayashi and Matsumoto jlU] prove that without entanglement 
c^uantum multiprover proofs are as powerful as classical. They also prove that 
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if we limit prior entanglement to be polynomial in the input size the power of 
the proof can only decrease. 

In this paper we concentrate on the case of two quantum provers with unlim- 
ited prior entanglement and one round of communication. The power of such 
proofs is not known. On the one hand more entanglement gives the provers 
power to prove more languages to the verifier, but on the other hand it gives 
them more power to cheat the verifier. The only prior result we are aware of, 
is that of Kempe and Vidick [7] , that such provers can prove NP with perfect 
completeness and some non-negligible soundness, to a verifier whose space is 
limited to be logarithmic in the input size. 

The problem we are facing touches the basic question of what entanglement 
can achieve, and how to quantify it. There are many demonstrations of the 
power of entanglement (e.g., teleportation [3] and superdense coding [5]). There 
is also a natural measure for measuring the amount of entanglement in pure 
states [11] . Yet, there is no good measure for the amount of entanglement in 
mixed states. 

Another demonstration of the power of entanglement are nonlocal games. 
In those games Alice and Bob play as provers against a fixed verifier. Their 
goal is to make him accept. The value of the game is the probability a verifier 
accepts when Alice and Bob play optimally. Alice and Bob cannot interact 
during the game but in the quantum model they may share prior entanglement. 
The CHSH and the Magic Square games are two examples presented in [S] and 
[l] for games in which quantum provers outperform the classical provers and 
violate Bell inequalities for classical correlation between noninteracting parties. 
In the case of the Magic Square game there is even a perfect quantum strategy 
that achieves game value 1. The problem we work on is a strong generalization 
of quantum nonlocal games. 

It is fair to say that entanglement is far from being understood. In partic- 
ular, we don't even understand whether infinite entanglement gives additional 
power over limited entanglement, and this is the core of the problem we try to 
deal with in this work. 

Our approach is to generalize the direction Watrous and Kitaev [S] took with 
the quantum single provcr case. They gave an algebraic characterization for 
the maximum acceptance probability of a fixed verifier in terms of the diamond 
superoperator norm. Then they used a nice algebraic property of the diamond 
norm, proved previously by Kitaev [8], to get strong results about quantum 
single prover proofs. 

We manage to get an algebraic characterization of one-round, two-prover 
games. We define a "product superoperator norm" and use it to characterize the 
maximum acceptance probability of a fixed verifier in the quantum two prover, 
one round case. However, we are unable to analyze it algebraically. We get some 
partial results and in particular we analyze the "rank one" case. Even this case 
is nontrivial. We also present some hypotheses about our characterization and 
give their implications on the power of the proof system. 
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2 Preliminaries and Background 



2.1 Basic Notation 

For a Hilbcrt space 7i with dimension dim(7i) we denote by L{Ti) the set of all 
linear operators over Ti and by U{Ti) the set of all unitary operators over Ti. 
I-H denotes the identity operator over H. A superoperator T : L{Hi) L{H2) 
is a linear mapping from L{'Hi) to L{Ti.2). 

Definition 1. The trace out operator is a superoperator from £(7ii ®TL2) to 
i(7ii) defined by 

Tin^iA^B) = Tr(B) • A 
for A e L{TLi) o,nd B G L{TL2) o,nd extended linearly to all of L{l-Li ® '^2)- 

It can be checked that for X € L{'Hi ^ ^2), Tr>^2(X) is independent of the 
representation X = Bi. Also it is easy to check that 

Tr(Tr„,(X))=Tr(X) (1) 

and that 

TTH,{{C®I)X) = CTTn,{X) (2) 

for any C S L{ni). 

2.2 Quantum Interactive Proof Systems 

In quantum interactive proof systems the verifier and the provers are quantum 
players. The protocol lives in V ® Mi ® ■ ■ ■ (i^ Mk (Si Vi ■ ■ ■ (Si Vk where V is 
the verifier private register, Mi is the message register between the verifier and 
the i'th prover and Vi is the i'th prover private register. V and Mi are of size 
polynomial in the input length. In every round of the proof the verifier applies 
a unitary transformation on V ® Mi ^ ■ ■ ■ ® Mk after which the Mi register 
is sent to the i'th prover who applies a unitary transformation on Mi (^S Vi 
and sends Mi back to the verifier. Because of the safe storage and the locality 
principle it is convenient to assume without loss of generality that there is only 
one measurement done by the verifier at the end, based on which he accepts or 
rejects. 

QIP(to) (Quantum IP) is the class of languages that can be proved to a 
quantum verifier with c = | and s = ^ by a single quantum prover with at 
most m messages passed between the prover and the verifier. Note that in the 
quantum model we usually count the actual number of passed messages in each 
direction and not the number of rounds, as is customary in the classical model. 

Kitaev and Watrous [5] proved that PSPACE C QIP = QIP(3) C EXP. 
There is no similar result in classical IP . They also showed that any language in 
QIP (3) has a proof with perfect completeness. Also QIP (3) has perfect parallel 
amplification. 

We now turn to multiprover proof systems. An important parameter of 
multiprover quantum interactive proof systems is the maximal amount of en- 
tangled qubits the provers arc allowed to share (if at all) in the initial state of 
Vi® ■ ■ ■ ® 'Pfe. We say that the provers have q{\x\) -prior- entanglement if all the 
provers hold at most (7(|a;|) entangled qubits in the initial state. 
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Definition 2.1. Fix functions fc(|a;|), TO(|a;|), (7(|a;|) > 0. QMIP{k,m,q) is the 
class of languages L for which there is an interactive proof system with 

• k quantum provers. 

• m communication rounds. 

• The initial state lijj) , between the provers is q{\x\) -prior- entangled, 
such that 

1. If X € L then there exist quantum provers Pi, . . . , and lip) for which Vx 
accepts with probability at least |. 

2. If X ^ L then for all quantum provers Pi, . . . , Pfe and \^) , Vx accepts with 
probability at most i. 

Note that we define m as tlie number of communication rounds, and not as 
tiie number of communication messages. Since we study only tfie case of one 
round two messages, the classical convention is more appropriate in this case. 

Denote 

QMIP(A:,m) = QMIP(fc,m,0) 
qmpP°iv{k^rn) = q}JlW{k,m,poly) 
QMIP*(fc,m) = QMIP(fc,m,oo) 

Kobayashi and Matsumoto prove in jTU] that 

qUW [poly, poly) = MIP {poly , poly) = NEXP 

Also, they proved that if the provers have poZy(|2:|)-prior-entanglement then 
we can assume that dim(Pi) = 2p°'2'(I^I) and therefore QMIPP^'^ {poly , poly) C 
QMIP {poly poly) . This is not necessarily an equality, because potentially, more 
entanglement may be used by the provers to cheat the verifier. It is possible 
that there are languages that can be proved without entanglement and can not 
be proved with it. 

Thus the main difference between the quantum and the classical models is 
that the provers can use prior-entanglement to their advantage, and otherwise 
QMIP = MIP. 

The power of QMIP* {poly , poly) is a mystery, the provers are stronger and 
thus it might seem that they may prove more languages. However the provers are 
also less trustworthy so there might be some languages that the classical provers 
can prove but quantum provers with entanglement can not. Thus, it is not even 
known that QMIP* {poly , poly) C NEXP or NEXP C QMIP* {poly , poly) . 

In [7] Kempe and Vidick expand the definition of QMIP(fc, 1) to QMIP^^^^ ^ ..{k, 1), 
the class of languages that have a QMIP proof with the verifiers complex- 
ity and the message registers logarithmic in the input size. They prove that 
NP C QMIPj*^g^ ^ i_2-o(,i) (2, 1). This implies that even if the provers have un- 
limited entanglement they can not cheat perfectly. Recently, this result have 
been improved to 1 — poiyi^n) soundness. By applying the padding argument this 
can be expanded to NEXP C QMIP*^,j^(„)^^^^_2-p„i„(„, (2, 1). 
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2.3 The Diamond Norm 



In this section we survey Kitaev and Watrous [S] characterization of QIP(3) 
using the diamond norm. 

Definition 2. The Trace Norm of an operator A £ L{Ti.) is 

||A|L = max \Tt{UA)\ 
" ueu{n) 

If A is a normal matrix with eigenvalues {Xi} then || A jj^j. = For a 

general A it can be checked that || A Ij^.^. = Tt{\A\) = Tr(VAAt). Also || A \\^^. 
J2i Si{A) where si{A) > • • • > s„(A) are the singular values of A. The natural 
generalization of the j| to superoperators is 

Definition 3. Let T : L{Ti.i) ^ L{Ti.2) be a superoperator. The li norm || 



Kr|li=^ max^J|r(A)||,,. 



Definition 4. A superoperator norm \\ \\ is /(n)-stable iff for any 
T : LiTLi) ^(7^2) having dim(7ii) — n md every N > it holds that 

Wt^InI < ||r(»/y(„) |[ 

If f{n) = we say that || || is stable. The li norm is not stable. For example 
consider the superoperator on i(C^) 

Ti\^){J\) = \J){^\,i^,J^O,l) 

On the one hand j| T = 1. On the other hand for A — J^i j \h i){3ii\i II ^ lltr = 
2 but \\T®Ii{A) llj^ = 4, and so || T «) /i || ^ > 2. 

Fortunately Kitaev [8] proved that || ||j^ is n-stable. For any iV > and 
n = dim (Hi) it holds that \\T®Im\\^ < ||T(K)/„||^. Watrous [H] gave a 
simpler proof of that. This allows to define the diamond norm. 

Definition 5. Let T : L{Ti.i) — * L{TL2) be a superoperator and n — dim(7ii) 

then the diamond norm || T ||^ is 

\\T\l = \\T®LA, 

This defines a norm [5]. The || ||^ is indeed stable. Kitaev [5] also proved 
that the diamond norm is multiplicative, i.e., ||T(g)i?||^ = || T ||^ 1| i? j|^. He 
also gave other equivalent mathematical formulations to it. 



2.4 QIP(3) Characterization by the diamond norm 

Denote QIP(3, s,c) the class of languages with a QIP proof system with three 
messages, soundness s and completeness c. Let L € QIP(3,s,l) proved to 
a verifier V . The protocol is characterized by the unitary operators Vi , V2 the 
verifier applies in each round, the initial state projection Tiinn and the accepting 
projection Ilacc- Denote Bi ~ ViWiniti B2 = IlaccV2- Let MAP(i3i, ^2) denote 
the maximal acceptance probability of the verifier. Kitaev and Watrous proved 
that 

MAP(Bi,S2) = ||T||^ 
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where T{X) = Trv{BiX B2) givmg a neat algebraic characterization of the 
game. 

As a corollary of the above characterization and the fact that the diamond 
norm is multiplicative Kitaev and Watrous showed that QIP(3, s, 1) has perfect 
parallel amplification. 



3 QMIP*(2, 1) and the Product Norm 

In this section we define a product operator norm and a product supcropcrator 
norm and later prove that the maximum acceptance probability for a given 
verifier in quantum one round two prover protocol can be described in terms of 
it. 



3.1 The Product Norm 

Definition 6. For Hilbert spaces Vi, V2 and a matrix A e L{Vi'S)V2) the product 
norm of A is 

Mllv.«v.=^^^rax^j7^K(C/i®C/2M)| 

Claim 1. 

Proof. The following things are simple. 

2- II llvi«iV2 M llvl«lV2■ 
3. Triangle inequality. 

4. IfA-OthcnMlly^^y^^O. 

We are left with showing that if ||A||y^^y^ = then A = Q. Assume 
Mllvi»V2 = 0- Then \\A\\^^. = Tr{UA) for some U £ C/(Vi «) V2). The 
transformation U can be represented as 

i 

where Wi £ U{Vi),Vi G U{V2)- This is true because there is a unitary basis 
for any L{H). One such possible basis is described in [13]. Thus Tr{UA) ~ 
aiTr{{Wi (g) Vi)A) = and so |j A \\^^ = and A = 0. □ 

We notice that 



||Trv,(A)|l,,<M|l <\\A\\,, (3) 

The left inequality follows from Equations (1) and (2) because 
Tr((C/i (g) U2)A) = Tt{Ui Ttv^{{I ® U2)A)). The right inequality follows from 
the fact that maxy.g[/(y.) \Tr{{Ui g) U2)A)\ < max[/g[/(yj^y2) |Tr([/A)|. Those 
inequalities can be strict, for example for A of the form A = \u){v\. For any 
such A, II A ||j.j, = 1 but we will show later that for A = |epr)(00| it holds that 
Mllc2«.c2 = 73 (where \epr) = ^jdOO) + |11))). Another example is A = 
|00)(11| with the partition Vi = V2 = C^. On the one hand || Try^l^) lltr = 0' 
but as we will show later || A ||y ^y = 1. 



6 



3.2 The Superoperator Product Norm 

Next, wc define a superoperator product norm. 

Definition 7. For Hilbert spaces V, Vi, V2 and superoperator T : L(y) L(Vi(8) 
V2) the superoperator product norm is 

II ^ llvi®V2,tr = II max^^ II T{A) 11^^^^^ 

It is easy to check that this is a norm and that || -^|lvi(giV2 tr ~ ^- Also, it 
foUows from Equation (3) that || T Hy^^y^ — II Ho- ^ useful fact is: 



Claim 2. 



II ^ llvi«5V2,tr = II ^^l''^ ^''1) llvi^V. 



Proof. Any A satisfying || ^H^j. = 1 has a singular value decomposition A 
Z^i Si \ui){vi\ for Si >0 and = 1. Thus 



r(A) 



Vl(»V2 



r(^s, |u,)('y,|) 

Vl«)V2 

< 5]s,||T(|^,)(.;,|)||^ 



ll»V2 

< max|| T(|w,)(wj|) lly^^y^ 

Thus the maximum is always achieved on some rank one matrix |u)(w|. □ 

Claim 3. For any two superoperators T : L{Ti.i) ^ L{Vi®V2) and R : L{Ti.2) ^ 
£(yVi (E) W2) it holds that 

II T (g) i? ll(Vi(giWi)(gi(V2i8iW2),«r — II ^ llvi(giV2,tT- ■ II ^ llwi(giW2,tr 

Proof. 

ll^'^-R||(Vi(giWi)(gi(V2(giW2),tr = II ™[^^^JI {T<ER}{X) ||(Vi(g.Wi)(g.(V2<giW2) 

Let us look at the special case where X £ L{Tii®'H2) is product, X = A®B 
for some A e L{Hi) and B e £(^2)- 

II ^ll(Vi<»Wi)<»(V2<»W2),tr ^ II 4 II "l^ifS II _JI ll(Vi«>Wi)(»(V2«>W2) 

II ^ llt.r — II -° lltr — 

= 11.11 ™ifR II _JI^(^)®-^(-^)ll(Vl®Wl)»(V2»W2) 

I llt.r — II -° llt.r — 

max Tr((C/i(g)[/2)(T(^)®i?(B))) 

||yl||,^. = ||B||,,, = l,C/i,;72 

for unitaries Ui € Uiyi(g)Wi) and U2 € C/(V2 «) >V2). We again look at 
the special case where Ui and U2 are also products of unitaries Ui = Vi ® W\ 
and U2 = V2®W2 for € L/(Vi), T^i € t/(Wi), Y2 G C/(V2), 1^2 e C/(W2). Then 



7 



I T (g) i? || (Vi(»Wi)«i(V2«iW2),ti- 



> max|| A II, =11 B II, =1,^1.^2.1^1,^-2 Tr((Fi ®Wi®V2® W2)iT{A) (g R[B))) 
= max|| A \i=\\ B \\l=i,Vuvl,w^,w, Tr((Fi ® V2)T{A)) ■ Tr((TFi (g W^2)i?(S)) 



— II ^ llvi(8iV2,ti- ' II ^ llwiigiW2,tr 



□ 



111 particular it follows from above that 

I ^ llvi(»V2,tr - ll^<^^Wi«iW2 ll(Vi«iWi)«i(V2i8iW2),tr 

Ncxt we expand the definition of stability to the superoperator product 
norm. We do this by adding to each register of the original partition Vi, V2 an 
additional register and applying the superoperator T ® 1^ ® In with the 
identity operator over the new registers. 

Definition 3.1. A \\ Hvi^Va.tr f{n)-stable iff for any T : L{H) L(Vi®V2) 
having dim(7i) = n and every N > it holds that 

||Tg)/jv2 ||(Vi«iC")«.(V2«>C"),tr ^ ||^®-^/(")" ll(Vi»C/("))«.(V2(8>C^(")),tr 

The II ||vi(giV2 tr norm is not stable. Consider the superoperator 
T : L{C^) -> L(C2 g) C^) that is defined by 

T{\i,j){k,m\) ^ \k,m){i,j\. Then || T ||c2^c2,t. < l|r||i = 1. On the other 
hand, ||Tg)/4 Il(c2»c2)®(c2»c2),tr = 4. To see that use A = \hj,hj){k,m,k,m\ 
It is easy to check that || A \\^^. = 4, and that by U \i, k) = \k, i) we have 
(C/(gC/)(r(g74)(^) =E,;,j-fc,™l«,fc,j,m)(i,A;,j,m| = and so 
\\T®h II (C2»c2)»(c2»c2),tr > 4. Altogether 

\\T ® h II (C2(giC2)(gi(C2(giC2),tr < II ^ llo = 4- 

3.3 QMIP*(2,1) 

In this section we focus on QMIP*(2, 1). The protocol is applied on the registers 
V (g Ml (g M2 (g Pi g) 7^2 where V is the verifier's private register. A^i, M.2 are 
the registers passed between V and Pi, P2 respectively. Pi, P2 are the private 
registers of the provers. The initial quantum state is some of an arbitrary 
length chosen as part of the prover strategy. 
The protocol proceeds as follows: 

1. The verifier applies a measurement defined by limit = |0)(0| on 

V (g A^i (g M.2- If the outcome is not |0) he rejects. This step checks the 
initial state. 

2. The verifier applies a unitary transformation Vi onV(gA^i(gA^2- This 
prepares the questions to the two provers. 

3. Prover i applies a unitary Ui on Aii <E) Vi. 

4. The verifier applies a unitary V2 on V (g Mi g) M2, followed by a mea- 
surement defined by Ilacc = |0) (0| on the first qubit of V and accepts iff 
the outcome is |0). 

If the provers are successful in convincing the verifier the final (unnormal- 
ized) state of the system is thus 

{{TlaccV2) g) /pi«pj(/v ®Ui(E) U2){iViIl,mt) ® IVifgiV.J W 
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3.4 Acceptance Probability for a Given Verifier 

Let y be a verifier. Vs strategy is defined by Bi = ViUmit and B2 = ^accV2- 
Let MAP{Bi, B2) denote the maximum acceptance probability of V, when V 
plays with the optimal provers. Le., 

MAP(Bi,S2)= max K^a ® /p,»pj(/v ® C/i ® f72)(Si ® /p.^pj IV') |' (4) 
Uieu(Mi»Vi),\i!) 

We now relate MAP{Bi, B2) to the superoperator product norm. We claim 
that: 

Theorem 3.2. MAP{B,,B2) = \\T ® Iv,<^v, ll(Aii»Pi)»(A^2®7'.),*r 

where T : L{V (g) Mi (E) M2) ^ L{Mi «) M2) is defined by T{X) = 
Trv{BiXB2). 

Proof. Denote V ~Vi®'P2- We start with Equation (4). 

VMAP(Bi,B2) = max \{B2® IvWv ®Ui®U2){Bi® Iv)\^)\ 

Ul,U2,tlJ 

Since we maximize over the unit vector lip) we can replace the vector norm with 
the operator norm 

v/MAP(Bi,S2) = max || {B2 ® IvWv ®Ui® C/2)(Bi ® Iv) \\ 

Ul,U2 

The operator norm of the matrix is the largest singular value, and so 

= max \{v\ {B2 ® Iv){Iv ® Ui ® U2){Bi ® I-p) \u)\ 

Ul,U2,V,U 

Since this is a scalar number we can insert trace 
y/MAP{Bi,B2) = max \Tt{{v\ {B2 ® Iv)ilv ® Ui ® U2){Bi ® Iv) \u))\ 

Ul,U2,V,U 

max \Tr{{Iv®Ui®U2)iBi®I'p)\u){v\iB2®Iv))\ 

By Equation (1) 

\/MAP(B^7b^= max \Tr{TYv{{Iv ® Ui ® U2)iBi ® Ij,) \u)(v\ {B2 ® Iv)))\ 

Ul,U2,V,U 

By Equation (2) we can carry the operators that do not affect V out. use 
the definition of T and then use Claim 2. 

VMAP(Bi,B2) = max \Ti{{Ui ® U2)Trv{{Bi ® Iv) \u)(v\ {B2 ® Iv)))\ 
= max \Tr{{Ui®U2){T®Iv){\u){v\))\ 

U\,U2,U,V 

= \\T ® Iv\\t^Mi®Vi)®{M2®V2),tr 

□ 

Let us notice that this proof is almost identical to the proof of QIP(3) 
characterization by Kitaev and Watrous The main difference is that here 
we have a product norm instead of the trace norm as a target. This is because 
the initial state of the provers in QMIP*(2, 1) can be viewed as the first message 
and so we actually have three messages instead of two. 
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4 Product Norm of Rank 1 Matrices 



Wc start with a useful bound on || BC \ \^^. and use it to show what is the product 
norm for rank 1 matrices. 

Lemma 4.1. Fix arbitrary matrices B and C with si{B) > ■ ■ ■ > s„(_B) > 
the singular values of B, and si(C) > • • • > s„(C) > the singular values of 
C. Then 

||SC||,,<^s.(i3)s,(C) 

i 

The above claim appears in [6j (page 182, Exercise 4). Notice also that this 
is tight for normal commuting matrices B and C . 
With that we prove: 

Theorem 4.2. Let A he a rank! matrix over Vi®V2- Thus A = \u){v\ for some 
u,v Vi®V2. Suppose the Schmidt decomposition ofu is \u) = \xi) ® \yi) , 

and of V is \v) = A I'"'*) ® 1-^*) with ai,Pi > sorted in descending order. 
Then 

i 

Proof. We can assume without loss of generality that \xi) = \yi) = \wi) = 
\zi) — \i) because ||^|lvi$>iVi ~ 

II (C/i ® U2)A{Vi ® V2) II 

Vi«iVi ^"-"^ ^"^y unitaries 

Ui,Vi e U(yi) and U2,V2 G U{V2). Thus 

A = \u){v\ = ^ai/3j \i,i){j,j\ 

and 

Tt{{U,<SiU2)A) = ^a,/3,(j|C/i|z)(j|C/2K) 

We can look at this sum of products as a standard matrix inner product. Let us 
denote the matrices C and B as follows, Cj^i = ai{Ui)j^i and Bj^i = Pj{U2)j,i- 
Then 

Tr {{Ui ® U2)A) = B^^JC^,J = Tr(B*C) 

By Lemma 4.1, |Tr(S*C)| < \\B^C\\^^ < X- because C = C/idiag(ai, . . . a„), 
B = diag(/?i, . . ■ (3n)U2, and so Si(C) = a; and Si{B) = Pi. Finally, this upper 
bound can be achieved hy Ui — U2 — I . □ 

5 Directions for Further Research 

We can not prove that the product norm stabilizes. However we would like to 
check what such a result would give. 

Hypothesis 1. || \\v,(g,v2.tr is poly (n) -stable. 
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Claim 4. Under hypothesis 1 QMIF'{2, 1) C NEXP = M/P(2, 1). 



Proof. Let L e QMIP*(2, 1). Consider a verifier V for L. By Theorem 5.1 the 
maximum acceptance probability of V is 

MAP(Bi,B2) = \\T (g) Iv,<g)V2 \\'{Mi<g>Vi)<g>iM2<g>V2).tr 

for Bi, B2 and T defined as before. It follows from Definitions 6,7 and Claim 2 
that 

MAP{BuB2) = Tr{{Ui®U2){T®Iv,^V2)i\u){v\)) 

for some Ui G U{Mi T'l), C/2 G U{M2 ® 7^2) and |m) ,\v) e V Mi M2 
Vi ®V2- Under the hypothesis we can fix such Ui,U2 and \u) , \v) that live 
in the world of poly(\x\) qubits. Consider the prover strategy Ui (81 U2 with 
the initial state \u). This strategy uses only poly{\x\) entangled qubits in the 
initial state and is optimal. Thus QMIP*(2, 1) C QMIPP°'^(2, 1) and we aheady 
mentioned that Kobayashi and Matsumoto proved in (TU] that QMIPP°'^(2, 1) C 
NEXP. □ 

Another hypothesis is the following. It is not known if there exists an effi- 
cient Turing machine for approximating the |j ||^. However Kitaev and Watrous 
proved in [9] that QIP C EXP by showing a reduction from distinguishing be- 
tween the case of MAP(Bi,B2) = 1 and MAP(Bi,B2) < ^ to a semidefinite 
programming problem of an exponential size (in the number of qubits). 

Hypothesis 2. ForT : L{TL) L{yi®V2) there exists a Turing machine that 
approximates \\ T Hy^^y^ in poly{A\m{T-L) + dim(Vi ® V2)) time. 

Claim 5. // both hypotheses are true then QMIP'{2, 1) C EXP. 

Proof. Let L G QMIP*(2, 1). Hypothesis 1 implies that L has a protocol 
(y, Pi, P2) with maximum acceptance probability 

\\T ® IVi(g,r2 \\{Mi»Vi)CSiM2(SV2),tr 

for T defined as previously and dim 2 (81 7^2) = 2p°'2'(I^I). Hypothesis 
2 implies that a there is a Turing machine that approximates the maximum 
acceptance probability and decides if .t G P in poZy(2^°'^'^l^l)) time. □ 
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